THABACHWEU LOCAL MUNICIPALITY 


E-mail Security 

Policy 



The Thabachweu Local Municipality’s intentions for publishing policies and procedures is not to impose 
restrictions that are contrary to the Municipality’s established culture of openness, trust and integrity. The 
Municipality is committed to protecting its employees, clients, and service providers from any illegal or 
damaging actions by individuals, either knowingly or unknowingly. 
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1. Purpose 

The purpose of the Thabachweu Local Municipality's Email Security Policy is to govern security levels of 
the Municipality's e-mail infrastructure and the user thereof. 

2. Policy Statement 


• Private use of the Municipality's email and messaging infrastructure is permitted but this is subject 
to strict control. Abuse of this privilege may be regarded as misconduct. 

• All emails created, sent, stored, forwarded, or printed are the property of the Thabachweu Local 
Municipality. 

• By using the Municipality's e-mail infrastructure, users will have been deemed to have read, 
understood and agreed to all the policies relating to Thabachweu Local Municipality email 
infrastructure. 

• Employees must not forward any confidential, secret or proprietary information to any third 
parties. 

• Confidential information is deemed confidential or company proprietary information when the 
following headings or subtext are present: 

o Confidential Information 
o Proprietary Information 

o Thabachweu Local Municipality Internal Information 
o Internal use 
o Private 

• Employees shall only forward classified or confidential messages to other employees that are 
permitted / authorised to receive such information. 

• Only urgent messages should be marked as "urgent" 

• Adhere to security messaging or warnings regarding virus alerts from the e-mail or anti-virus 
system, administrators and the Security Officer. 

• If you get an attachment via Email which is unsolicited or of unknown origin, delete the e-mail or 
request support assistance form ICT support staff. 

• It is advisable to delete any unknown email and do not reply to the sender that the mail was 
deleted 

• Ensure that the content of your message is not ambiguous and that there is nothing unlawful about 
the transmission or content of your message. 

• It is prohibited to display or transmit; 

o Offensive, defamatory, discriminatory or harassing material; 
o Sexually explicit or other offensive images or jokes; 
o Unlicensed copyright material; 
o Non-business related video and image files; 

o Any message which would be deemed unlawful pursuant to the applicable law of any 
governing jurisdiction; 
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o Confidential, proprietary or trade secret information outside without authorisation; 
o Private and personal advertisements; 
o Chain letters. 

o Do not send or forward Email notices concerning virus or harmful code warnings to other 
employees. It is the function of the mandated unit to notify people, 
o The Thabachweu Local Municipality email and messaging infrastructure will not be used for 
Politically motivated e-mails 

• Employees shall not use an electronic mail account assigned to another individuals to either send or 
receive messages. 

• Individuals that require other users to use their messaging infrastructure must request written 
approval from the Municipality's Security Officer. 

• Employees should regularly save important information from electronic mail message files to word 
processing documents, databases, and other files, as Email messages and attachments may be 
erased periodically, either accidentally or as part of normal archiving and file maintenance 
functions. 

• If employees receive unwanted and unsolicited email (also known as SPAM), they shall refrain from 
responding directly to the sender. The Security Officer should be notified if writing with all the 
relevant information. 

• It is the responsibility of individual employees to manage their own Email once they have 
downloaded it. It is suggested that unwanted Emails are regularly deleted and important Emails are 
moved to appropriate folders. Important attachments should be saved in an appropriate folder 
within the "My Documents" folder and saved to a network server for backup. Contact your local 
administrator for further information regarding the management of Email is required. 

• When using Thabachweu Local Municipality messaging systems, or when conducting Thabachweu 
Local Municipality business over the internet, employees shall not deliberately conceal or 
misrepresent their identity. 

• Do not forward emails and attachments that were intended for the receiver only. The email sender 
will add the following line to the respective email "This email should not be forwarded or 
disseminated by the email recipient". 

3. Anti-Virus Protection 

The responsibility remains with the user to ensure that the computer they are using, regardless if the 

equipment is owned by the Municipality or privately, have an anti-virus application installed that 

complies with the following: 

• The anti-virus application must be enabled. 

• The anti-virus application must be enabled. 

• The virus signatures may not be older than 30 days. 
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4. Monitor and Audit 

The Municipality's Security Officer reserves the right to carry out any monitoring or auditing exercise 
around e-mail stored or used over the Municipality's infrastructure without prior notice. The 
Thabachweu Local Municipality reserves the right to install any "e-mail content scanning" solution on 
the Municipality's computers or email infrastructure without informing any of its users, employees or 
contractors. 

5. Block or Stop messages 

The Municipality's Security Officer reserves the right to stop or block any messages on the 
Municipality's email infrastructure regardless if the source or destination is internal or external. These 
may include but not limited to the following: 

• Spam mail 

• Unsecure attachments 

• Undesired mail 

• Security breach 

• Virus outbreak 

• Any e-mail that the Security Officer deems damaging to the Thabachweu Local Municipality's 
infrastructure or corporate image. 

6. Approved infrastructure 

6.1. Approved Equipment 

• All the computers of the Thabachweu Local Municipality. 

• Secure virus-free home computers. 

• Portable devices such as Smart phones and Tablets that support anti-virus protection or similar 
capabilities. 

6.2. Approved Software 

• Microsoft Outlook 2010 

6.3. Password Protection 

All attachments containing confidential information must be password protected prior to e-mailing 
them to an internal or external mail recipient. 

6.4. Application Links 
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Insecure Internet Links are not allowed to be included in any e-mail correspondence. These links 
are deemed unsecure and may result in data or information theft 

6.5. Encryption 

The Municipality has no governing policy for email encryption. Approval must be obtained in 
writing from the Thabachweu Local Municipality's Security Officer prior to installation. 

The Security Officer must document, store or backup all the relevant information around the 
encryption solution for disaster recovery and business continuity purposes. 

7. General 

• The use of the Internet is a privilege, not a right, and inappropriate use will result in a cancellation 
of those privileges. (Each employee who receives an account will be part of a discussion with a 
member of ICT support pertaining to the proper use of the network.) Only the Municipality's 
Security Officer can authorize, revoke or suspend a user's internet access. 

• Security on any computer system is a high priority, especially when the system involves many users. 
If you feel you can identify a security problem or risk on the Internet, they must notify the 
Municipality's Security Officer immediately. 

• Any user identified as a security risk or having a history of problems with other computer systems 
may be denied access to Municipality's internet service. 

• The purpose of the Municipality's Internet services to support research and education; in and 
among institutions across the world by providing access to unique resources and allowing the 
opportunity for collaborative work. The use of your account must be in support of the business and 
service delivery objectives of Thabachweu Local Municipality. 

8. Corrective actions for non-policy compliance 

• Failure to comply with the guidelines stipulated in the Municipality's policies will result in the 
following corrective or disciplinary procedures. 

• The decisive action that will be taken against the employee is dependent on the severity level and 
the level of the security risk. 

• Warning from Management 

o The employee receives a warning from their manager that they were in violation of policy. 

• Written Warning in Personnel File 

o The employee is reprimanded, and official notice is put in their personnel file. This may 
have negative consequences during future performance reviews or promotion 
considerations. 

• Revoking Privileges 
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o Access to certain resources, such as internet or email, can be revoked for a limited period 
providing that this action does not have a negative impact on the employee's job functions. 

• Training 

o Adequate training to create awareness and guidance on policy compliance. 

• Disciplinary action will be determined in compliance to Schedule 8 of the Labour Relations Act 66 of 
1995 or other related Public Service Regulations. 

9. Glossary and Abbreviations 


Please refer to the Thabachweu Glossary and abbreviations guide. 
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